diff --git a/astrbot/dashboard/routes/__init__.py b/astrbot/dashboard/routes/__init__.py
index 8d08b9d53..8f43588dd 100644
--- a/astrbot/dashboard/routes/__init__.py
+++ b/astrbot/dashboard/routes/__init__.py
@@ -10,6 +10,7 @@
 from .conversation import ConversationRoute
 from .file import FileRoute
 from .session_management import SessionManagementRoute
+from .command_permission import CommandPermissionRoute
 
 
 __all__ = [
@@ -25,4 +26,5 @@
     "ConversationRoute",
     "FileRoute",
     "SessionManagementRoute",
+    "CommandPermissionRoute",
 ]
diff --git a/astrbot/dashboard/routes/command_permission.py b/astrbot/dashboard/routes/command_permission.py
new file mode 100644
index 000000000..aaeafca71
--- /dev/null
+++ b/astrbot/dashboard/routes/command_permission.py
@@ -0,0 +1,235 @@
+import traceback
+import time
+from typing import List, Dict, Any
+
+from .route import Route, Response, RouteContext
+from astrbot.core import logger
+from quart import request
+from astrbot.core.core_lifecycle import AstrBotCoreLifecycle
+from astrbot.core.star.star_handler import star_handlers_registry, StarHandlerMetadata
+from astrbot.core.star.filter.command import CommandFilter
+from astrbot.core.star.filter.command_group import CommandGroupFilter
+from astrbot.core.star.filter.permission import PermissionTypeFilter
+from astrbot.core.star.star import star_map
+from astrbot.core import DEMO_MODE
+from astrbot.core.utils.shared_preferences import SharedPreferences
+
+
+class CommandPermissionRoute(Route):
+    def __init__(
+        self,
+        context: RouteContext,
+        core_lifecycle: AstrBotCoreLifecycle,
+    ) -> None:
+        super().__init__(context)
+        self.routes = {
+            "/command_permission/get": ("GET", self.get_command_permissions),
+            "/command_permission/set": ("POST", self.set_command_permission),
+            "/command_permission/get_commands": ("GET", self.get_all_commands),
+        }
+        self.core_lifecycle = core_lifecycle
+        self._commands_cache = None
+        self._cache_timestamp = 0
+        self._cache_ttl = 60  # 缓存60秒
+        self.register_routes()
+
+    async def get_command_permissions(self) -> Response:
+        """获取所有指令的权限配置"""
+        try:
+            sp = SharedPreferences()
+            alter_cmd_cfg = sp.get("alter_cmd", {})
+            
+            # 构建权限配置列表
+            permissions = []
+            
+            # 遍历所有插件的权限配置
+            for plugin_name, plugin_config in alter_cmd_cfg.items():
+                for command_name, config in plugin_config.items():
+                    permission_type = config.get("permission", "member")
+                    permissions.append({
+                        "plugin_name": plugin_name,
+                        "command_name": command_name,
+                        "permission": permission_type,
+                        "id": f"{plugin_name}.{command_name}"
+                    })
+            
+            return Response().ok({"permissions": permissions}).__dict__
+        except Exception:
+            logger.error(f"/api/command_permission/get: {traceback.format_exc()}")
+            return Response().error("获取指令权限配置失败").__dict__
+
+    def _get_permission_info(self, handler: StarHandlerMetadata, plugin) -> tuple[str, bool]:
+        """提取权限信息的辅助函数"""
+        sp = SharedPreferences()
+        alter_cmd_cfg = sp.get("alter_cmd", {})
+        current_permission = "member"  # 默认权限
+        
+        if (plugin.name in alter_cmd_cfg and 
+            handler.handler_name in alter_cmd_cfg[plugin.name]):
+            current_permission = alter_cmd_cfg[plugin.name][handler.handler_name].get("permission", "member")
+        
+        # 检查是否有默认的权限过滤器
+        has_default_admin = False
+        for f in handler.event_filters:
+            if isinstance(f, PermissionTypeFilter):
+                if f.permission_type.name == "ADMIN":
+                    has_default_admin = True
+                    if current_permission == "member":
+                        current_permission = "admin"
+                break
+        
+        return current_permission, has_default_admin
+
+    def _is_cache_valid(self) -> bool:
+        """检查缓存是否有效"""
+        return (self._commands_cache is not None and 
+                time.time() - self._cache_timestamp < self._cache_ttl)
+    
+    def _invalidate_cache(self):
+        """清空缓存"""
+        self._commands_cache = None
+        self._cache_timestamp = 0
+    
+    def _build_commands_list(self) -> list:
+        """构建指令列表（无缓存）"""
+        commands = []
+        
+        # 遍历所有注册的处理器
+        for handler in star_handlers_registry:
+            if not isinstance(handler, StarHandlerMetadata):
+                logger.warning(f"Handler {handler} is not an instance of StarHandlerMetadata, skipping.")
+                continue
+            plugin = star_map.get(handler.handler_module_path)
+            
+            if not plugin:
+                continue
+            
+            # 查找指令过滤器
+            for filter_ in handler.event_filters:
+                if isinstance(filter_, CommandFilter):
+                    current_permission, has_default_admin = self._get_permission_info(handler, plugin)
+                    
+                    commands.append({
+                        "command_name": filter_.command_name,
+                        "plugin_name": plugin.name,
+                        "handler_name": handler.handler_name,
+                        "description": getattr(handler, 'description', ''),
+                        "current_permission": current_permission,
+                        "has_default_admin": has_default_admin,
+                        "id": f"{plugin.name}.{handler.handler_name}"
+                    })
+                elif isinstance(filter_, CommandGroupFilter):
+                    current_permission, has_default_admin = self._get_permission_info(handler, plugin)
+                    
+                    commands.append({
+                        "command_name": filter_.group_name,
+                        "plugin_name": plugin.name,
+                        "handler_name": handler.handler_name,
+                        "description": getattr(handler, 'description', ''),
+                        "current_permission": current_permission,
+                        "has_default_admin": has_default_admin,
+                        "is_group": True,
+                        "id": f"{plugin.name}.{handler.handler_name}"
+                    })
+        
+        return commands
+    
+    async def get_all_commands(self) -> Response:
+        """获取所有可用的指令列表"""
+        try:
+            # 检查缓存
+            if self._is_cache_valid():
+                commands = self._commands_cache
+            else:
+                # 重新构建并缓存
+                commands = self._build_commands_list()
+                self._commands_cache = commands
+                self._cache_timestamp = time.time()
+            
+            return Response().ok({"commands": commands}).__dict__
+        except Exception:
+            logger.error(f"/api/command_permission/get_commands: {traceback.format_exc()}")
+            return Response().error("获取指令列表失败").__dict__
+
+    async def set_command_permission(self) -> Response:
+        """设置指令权限"""
+        if DEMO_MODE:
+            return Response().error("演示模式下不允许修改配置").__dict__
+        
+        try:
+            data = await request.get_json()
+            plugin_name = data.get("plugin_name")
+            handler_name = data.get("handler_name")
+            permission = data.get("permission")
+            
+            missing_params = []
+            if not plugin_name:
+                missing_params.append("plugin_name")
+            if not handler_name:
+                missing_params.append("handler_name")
+            if not permission:
+                missing_params.append("permission")
+            if missing_params:
+                return Response().error(f"参数不完整，缺少: {', '.join(missing_params)}").__dict__
+            
+            normalized_permission = permission.lower()
+            if normalized_permission not in ["admin", "member"]:
+                return Response().error("权限类型错误，只能是 admin 或 member").__dict__
+            
+            # 使用规范化后的权限值
+            permission = normalized_permission
+            
+            # 查找对应的处理器
+            found_handler = None
+            for handler in star_handlers_registry:
+                if (handler.handler_module_path in star_map and
+                    star_map[handler.handler_module_path].name == plugin_name and
+                    handler.handler_name == handler_name):
+                    found_handler = handler
+                    break
+            
+            if not found_handler:
+                return Response().error("未找到指定的指令处理器").__dict__
+            
+            # 更新配置
+            sp = SharedPreferences()
+            alter_cmd_cfg = sp.get("alter_cmd", {})
+            
+            if plugin_name not in alter_cmd_cfg:
+                alter_cmd_cfg[plugin_name] = {}
+            
+            if handler_name not in alter_cmd_cfg[plugin_name]:
+                alter_cmd_cfg[plugin_name][handler_name] = {}
+            
+            alter_cmd_cfg[plugin_name][handler_name]["permission"] = permission
+            sp.put("alter_cmd", alter_cmd_cfg)
+            
+            # 清空缓存，因为权限配置已经改变
+            self._invalidate_cache()
+            
+            # 动态更新权限过滤器
+            from astrbot.core.star.filter.permission import PermissionType
+            found_permission_filter = False
+            
+            # 更新第一个 PermissionTypeFilter（与项目其他部分保持一致）
+            for filter_ in found_handler.event_filters:
+                if isinstance(filter_, PermissionTypeFilter):
+                    if permission == "admin":
+                        filter_.permission_type = PermissionType.ADMIN
+                    else:
+                        filter_.permission_type = PermissionType.MEMBER
+                    found_permission_filter = True
+                    break
+            
+            if not found_permission_filter:
+                # 如果没有权限过滤器，则添加一个
+                new_filter = PermissionTypeFilter(
+                    PermissionType.ADMIN if permission == "admin" else PermissionType.MEMBER
+                )
+                found_handler.event_filters.insert(0, new_filter)
+            
+            return Response().ok({"message": f"已将 {handler_name} 权限设置为 {permission}"}).__dict__
+            
+        except Exception:
+            logger.error(f"/api/command_permission/set: {traceback.format_exc()}")
+            return Response().error("设置指令权限失败").__dict__
\ No newline at end of file
diff --git a/astrbot/dashboard/server.py b/astrbot/dashboard/server.py
index 06f6f8e60..3e5358a20 100644
--- a/astrbot/dashboard/server.py
+++ b/astrbot/dashboard/server.py
@@ -60,6 +60,9 @@ def __init__(
         self.session_management_route = SessionManagementRoute(
             self.context, db, core_lifecycle
         )
+        self.command_permission_route = CommandPermissionRoute(
+            self.context, core_lifecycle
+        )
 
         self.app.add_url_rule(
             "/api/plug/<path:subpath>",
diff --git a/dashboard/src/i18n/locales/en-US/core/navigation.json b/dashboard/src/i18n/locales/en-US/core/navigation.json
index 501383020..4b17b4984 100644
--- a/dashboard/src/i18n/locales/en-US/core/navigation.json
+++ b/dashboard/src/i18n/locales/en-US/core/navigation.json
@@ -4,6 +4,7 @@
   "providers": "Providers",
   "toolUse": "MCP Tools",
   "config": "Config",
+  "commandPermission": "Command Permission",
   "extension": "Extensions",
   "extensionMarketplace": "Extension Market",
   "chat": "Chat",
diff --git a/dashboard/src/i18n/locales/zh-CN/core/navigation.json b/dashboard/src/i18n/locales/zh-CN/core/navigation.json
index d0ed8453a..ae5bb7d60 100644
--- a/dashboard/src/i18n/locales/zh-CN/core/navigation.json
+++ b/dashboard/src/i18n/locales/zh-CN/core/navigation.json
@@ -4,6 +4,7 @@
   "providers": "服务提供商",
   "toolUse": "MCP",
   "config": "配置文件",
+  "commandPermission": "指令权限管理",
   "extension": "插件管理",
   "extensionMarketplace": "插件市场",
   "chat": "聊天",
diff --git a/dashboard/src/layouts/full/vertical-sidebar/sidebarItem.ts b/dashboard/src/layouts/full/vertical-sidebar/sidebarItem.ts
index 43f062d1c..1ab9027b6 100644
--- a/dashboard/src/layouts/full/vertical-sidebar/sidebarItem.ts
+++ b/dashboard/src/layouts/full/vertical-sidebar/sidebarItem.ts
@@ -43,6 +43,11 @@ const sidebarItem: menu[] = [
     icon: 'mdi-cog',
     to: '/config',
   },
+  {
+    title: 'core.navigation.commandPermission',
+    icon: 'mdi-shield-key',
+    to: '/command-permission',
+  },
   {
     title: 'core.navigation.extension',
     icon: 'mdi-puzzle',
diff --git a/dashboard/src/router/MainRoutes.ts b/dashboard/src/router/MainRoutes.ts
index 8beff1f26..9b3ccca19 100644
--- a/dashboard/src/router/MainRoutes.ts
+++ b/dashboard/src/router/MainRoutes.ts
@@ -105,6 +105,11 @@ const MainRoutes = {
       name: 'About',
       path: '/about',
       component: () => import('@/views/AboutPage.vue')
+    },
+    {
+      name: 'CommandPermission',
+      path: '/command-permission',
+      component: () => import('@/views/CommandPermissionPage.vue')
     }
   ]
 };
diff --git a/dashboard/src/stores/common.js b/dashboard/src/stores/common.ts
similarity index 84%
rename from dashboard/src/stores/common.js
rename to dashboard/src/stores/common.ts
index fb951fc0a..e4ec3ba3d 100644
--- a/dashboard/src/stores/common.js
+++ b/dashboard/src/stores/common.ts
@@ -1,18 +1,37 @@
 import { defineStore } from 'pinia';
 import axios from 'axios';
 
+interface LogCacheItem {
+  type: string;
+  data: string;
+}
+
+interface PluginData {
+  name: string;
+  desc: string;
+  author: string;
+  repo: string;
+  installed: boolean;
+  version: string;
+  social_link?: string;
+  tags: string[];
+  logo: string;
+  pinned: boolean;
+  stars: number;
+  updated_at: string;
+}
+
 export const useCommonStore = defineStore({
   id: 'common',
   state: () => ({
-    // @ts-ignore
-    eventSource: null,
-    log_cache: [],
+    eventSource: null as AbortController | null,
+    log_cache: [] as LogCacheItem[],
     sse_connected: false,
 
     log_cache_max_len: 1000,
     startTime: -1,
 
-    pluginMarketData: [],
+    pluginMarketData: [] as PluginData[],
   }),
   actions: {
     async createEventSource() {
@@ -52,12 +71,16 @@ export const useCommonStore = defineStore({
         console.log('SSE stream opened');
         this.sse_connected = true;
 
+        if (!response.body) {
+          throw new Error('Response body is null');
+        }
+        
         const reader = response.body.getReader();
         const decoder = new TextDecoder();
 
         let incompleteLine = ""; // 用于存储不完整的行
 
-        const handleIncompleteLine = (line) => {
+        const handleIncompleteLine = (line: string): LogCacheItem | null => {
           incompleteLine += line;
           // if can parse as JSON, return it
           try {
@@ -69,7 +92,8 @@ export const useCommonStore = defineStore({
           }
         }
 
-        const processStream = ({ done, value }) => {
+        const processStream = (result: ReadableStreamReadResult<Uint8Array>): Promise<any> | undefined => {
+          const { done, value } = result;
           // get bytes length
           const bytesLength = value ? value.byteLength : 0;
           console.log(`Received ${bytesLength} bytes from live log`);
@@ -91,7 +115,7 @@ export const useCommonStore = defineStore({
             if (line.startsWith('data:')) {
               const data = line.substring(5).trim();
               // {"type":"log","data":"[2021-08-01 00:00:00] INFO: Hello, world!"}
-              let data_json = {}
+              let data_json: any = {}
               try {
                 data_json = JSON.parse(data);
               } catch (e) {
@@ -104,8 +128,8 @@ export const useCommonStore = defineStore({
                   return; // 如果无法解析，跳过当前行
                 }
               }
-              if (data_json.type === 'log') {
-                this.log_cache.push(data_json);
+              if (data_json && data_json.type === 'log') {
+                this.log_cache.push(data_json as LogCacheItem);
                 if (this.log_cache.length > this.log_cache_max_len) {
                   this.log_cache.shift();
                 }
@@ -113,7 +137,7 @@ export const useCommonStore = defineStore({
             } else {
               const parsedData = handleIncompleteLine(line);
               if (parsedData && parsedData.type === 'log') {
-                this.log_cache.push(parsedData);
+                this.log_cache.push(parsedData as LogCacheItem);
                 if (this.log_cache.length > this.log_cache_max_len) {
                   this.log_cache.shift();
                 }
@@ -127,7 +151,7 @@ export const useCommonStore = defineStore({
       }).catch(error => {
         console.error('SSE error:', error);
         // Attempt to reconnect after a delay
-        this.log_cache.push('SSE Connection failed, retrying in 5 seconds...');
+        this.log_cache.push({ type: 'log', data: 'SSE Connection failed, retrying in 5 seconds...' });
         setTimeout(() => {
           this.eventSource = null;
           this.createEventSource();
diff --git a/dashboard/src/views/CommandPermissionPage.vue b/dashboard/src/views/CommandPermissionPage.vue
new file mode 100644
index 000000000..9b3d66fb9
--- /dev/null
+++ b/dashboard/src/views/CommandPermissionPage.vue
@@ -0,0 +1,339 @@
+<template>
+  <div class="pa-4">
+    <v-row>
+      <v-col cols="12">
+        <v-card>
+          <v-card-title class="d-flex align-center">
+            <v-icon start>mdi-shield-key</v-icon>
+            指令权限管理
+          </v-card-title>
+          <v-card-subtitle>
+            管理所有指令的访问权限，控制哪些指令需要管理员权限
+          </v-card-subtitle>
+        </v-card>
+      </v-col>
+    </v-row>
+
+    <v-row class="mt-4">
+      <v-col cols="12">
+        <v-card>
+          <v-card-title>
+            <v-row class="align-center">
+              <v-col cols="6">
+                <span>指令列表</span>
+              </v-col>
+              <v-col cols="6" class="text-right">
+                <v-btn 
+                  color="primary" 
+                  @click="loadCommands"
+                  :loading="loading"
+                  variant="outlined"
+                >
+                  <v-icon start>mdi-refresh</v-icon>
+                  刷新列表
+                </v-btn>
+              </v-col>
+            </v-row>
+          </v-card-title>
+
+          <v-card-text>
+            <!-- 搜索和过滤 -->
+            <v-row class="mb-4">
+              <v-col cols="12" md="6">
+                <v-text-field
+                  v-model="searchText"
+                  label="搜索指令或插件"
+                  prepend-inner-icon="mdi-magnify"
+                  clearable
+                  variant="outlined"
+                  density="compact"
+                ></v-text-field>
+              </v-col>
+              <v-col cols="12" md="3">
+                <v-select
+                  v-model="filterPlugin"
+                  :items="pluginOptions"
+                  label="筛选插件"
+                  clearable
+                  variant="outlined"
+                  density="compact"
+                ></v-select>
+              </v-col>
+              <v-col cols="12" md="3">
+                <v-select
+                  v-model="filterPermission"
+                  :items="permissionOptions"
+                  label="筛选权限"
+                  clearable
+                  variant="outlined"
+                  density="compact"
+                ></v-select>
+              </v-col>
+            </v-row>
+
+            <!-- 数据表格 -->
+            <v-data-table
+              :headers="headers"
+              :items="filteredCommands"
+              :loading="loading"
+              class="elevation-1"
+            >
+              <template v-slot:item.command_name="{ item }">
+                <v-chip 
+                  :color="item.is_group ? 'purple' : 'blue'"
+                  variant="outlined"
+                  size="small"
+                >
+                  <v-icon start>{{ item.is_group ? 'mdi-folder' : 'mdi-console' }}</v-icon>
+                  {{ item.command_name }}
+                </v-chip>
+              </template>
+
+              <template v-slot:item.plugin_name="{ item }">
+                <v-chip 
+                  color="green"
+                  variant="tonal"
+                  size="small"
+                >
+                  {{ item.plugin_name }}
+                </v-chip>
+              </template>
+
+              <template v-slot:item.current_permission="{ item }">
+                <v-chip 
+                  :color="item.current_permission === 'admin' ? 'red' : 'blue'"
+                  :variant="item.current_permission === 'admin' ? 'flat' : 'tonal'"
+                  size="small"
+                >
+                  <v-icon start>
+                    {{ item.current_permission === 'admin' ? 'mdi-shield-crown' : 'mdi-account-group' }}
+                  </v-icon>
+                  {{ item.current_permission === 'admin' ? '管理员' : '所有用户' }}
+                </v-chip>
+              </template>
+
+              <template v-slot:item.actions="{ item }">
+                <v-btn-toggle
+                  :model-value="item.current_permission"
+                  @update:model-value="changePermission(item, $event)"
+                  mandatory
+                  variant="outlined"
+                  size="small"
+                  divided
+                >
+                  <v-btn value="member" size="small">
+                    <v-icon>mdi-account-group</v-icon>
+                    所有用户
+                  </v-btn>
+                  <v-btn value="admin" size="small">
+                    <v-icon>mdi-shield-crown</v-icon>
+                    管理员
+                  </v-btn>
+                </v-btn-toggle>
+              </template>
+
+              <template v-slot:item.description="{ item }">
+                <span class="text-body-2">{{ item.description || '无描述' }}</span>
+              </template>
+            </v-data-table>
+          </v-card-text>
+        </v-card>
+      </v-col>
+    </v-row>
+
+    <!-- 成功/错误提示 -->
+    <v-snackbar
+      v-model="snackbar.show"
+      :color="snackbar.color"
+      :timeout="3000"
+    >
+      {{ snackbar.message }}
+      <template v-slot:actions>
+        <v-btn
+          color="white"
+          variant="text"
+          @click="snackbar.show = false"
+        >
+          关闭
+        </v-btn>
+      </template>
+    </v-snackbar>
+
+    <!-- 确认对话框 -->
+    <v-dialog v-model="confirmDialog.show" max-width="400">
+      <v-card>
+        <v-card-title class="headline">确认修改</v-card-title>
+        <v-card-text>
+          确定要将指令 <strong>{{ confirmDialog.command }}</strong> 的权限修改为 
+          <strong>{{ confirmDialog.permission === 'admin' ? '管理员' : '所有用户' }}</strong> 吗？
+        </v-card-text>
+        <v-card-actions>
+          <v-spacer></v-spacer>
+          <v-btn
+            color="grey"
+            text
+            @click="confirmDialog.show = false"
+          >
+            取消
+          </v-btn>
+          <v-btn
+            color="primary"
+            @click="confirmPermissionChange"
+            :loading="confirmDialog.loading"
+          >
+            确认
+          </v-btn>
+        </v-card-actions>
+      </v-card>
+    </v-dialog>
+  </div>
+</template>
+
+<script setup>
+import { ref, computed, onMounted, reactive } from 'vue'
+import axios from 'axios'
+
+// 响应式数据
+const loading = ref(false)
+const commands = ref([])
+const searchText = ref('')
+const filterPlugin = ref('')
+const filterPermission = ref('')
+
+const snackbar = reactive({
+  show: false,
+  message: '',
+  color: 'success'
+})
+
+const confirmDialog = reactive({
+  show: false,
+  command: '',
+  permission: '',
+  item: null,
+  loading: false
+})
+
+// 表格头部定义
+const headers = [
+  { title: '指令名称', key: 'command_name', align: 'start' },
+  { title: '所属插件', key: 'plugin_name', align: 'start' },
+  { title: '当前权限', key: 'current_permission', align: 'center' },
+  { title: '描述', key: 'description', align: 'start' },
+  { title: '操作', key: 'actions', align: 'center', sortable: false, width: '200px' }
+]
+
+// 权限选项
+const permissionOptions = [
+  { title: '管理员', value: 'admin' },
+  { title: '所有用户', value: 'member' }
+]
+
+// 计算属性
+const pluginOptions = computed(() => {
+  const plugins = [...new Set(commands.value.map(cmd => cmd.plugin_name))]
+  return plugins.map(plugin => ({ title: plugin, value: plugin }))
+})
+
+const filteredCommands = computed(() => {
+  let filtered = commands.value
+
+  // 文本搜索过滤
+  if (searchText.value) {
+    const searchLower = searchText.value.toLowerCase()
+    filtered = filtered.filter(cmd => 
+      cmd.command_name.toLowerCase().includes(searchLower) ||
+      cmd.plugin_name.toLowerCase().includes(searchLower) ||
+      cmd.handler_name.toLowerCase().includes(searchLower) ||
+      (cmd.description && cmd.description.toLowerCase().includes(searchLower))
+    )
+  }
+
+  // 插件过滤
+  if (filterPlugin.value) {
+    filtered = filtered.filter(cmd => cmd.plugin_name === filterPlugin.value)
+  }
+
+  // 权限过滤
+  if (filterPermission.value) {
+    filtered = filtered.filter(cmd => cmd.current_permission === filterPermission.value)
+  }
+
+  return filtered
+})
+
+// 方法
+const showSnackbar = (message, color = 'success') => {
+  snackbar.message = message
+  snackbar.color = color
+  snackbar.show = true
+}
+
+const loadCommands = async () => {
+  loading.value = true
+  try {
+    const response = await axios.get('/api/command_permission/get_commands')
+    if (response.data.status === 'ok') {
+      commands.value = response.data.data.commands
+    } else {
+      showSnackbar('加载指令列表失败: ' + response.data.message, 'error')
+    }
+  } catch (error) {
+    console.error('加载指令列表失败:', error)
+    showSnackbar('加载指令列表失败', 'error')
+  } finally {
+    loading.value = false
+  }
+}
+
+const changePermission = (item, newPermission) => {
+  confirmDialog.command = item.command_name
+  confirmDialog.permission = newPermission
+  confirmDialog.item = item
+  confirmDialog.show = true
+}
+
+const confirmPermissionChange = async () => {
+  confirmDialog.loading = true
+  try {
+    const response = await axios.post('/api/command_permission/set', {
+      plugin_name: confirmDialog.item.plugin_name,
+      handler_name: confirmDialog.item.handler_name,
+      permission: confirmDialog.permission
+    })
+
+    if (response.data.status === 'ok') {
+      // 更新本地数据
+      confirmDialog.item.current_permission = confirmDialog.permission
+      showSnackbar(response.data.data.message, 'success')
+      confirmDialog.show = false
+    } else {
+      showSnackbar('修改权限失败: ' + response.data.message, 'error')
+    }
+  } catch (error) {
+    console.error('修改权限失败:', error)
+    showSnackbar('修改权限失败', 'error')
+  } finally {
+    confirmDialog.loading = false
+  }
+}
+
+// 生命周期
+onMounted(() => {
+  loadCommands()
+})
+</script>
+
+<style scoped>
+.v-card {
+  transition: all 0.3s ease;
+}
+
+.v-data-table {
+  border-radius: 8px;
+}
+
+.v-chip {
+  font-weight: 500;
+}
+</style>
\ No newline at end of file